We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent fc98953 commit 0abceafCopy full SHA for 0abceaf
.github/workflows/build-image-signed-cosign-static.yml
@@ -20,9 +20,7 @@ jobs:
20
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
21
22
- name: Install Cosign
23
- uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
24
- with:
25
- cosign-release: 'v2.1.1'
+ uses: sigstore/[email protected]
26
27
- name: Setup Docker buildx
28
uses: docker/setup-buildx-action@79abd3f86f79a9d68a23c75a09a9a85889262adf
@@ -54,4 +52,5 @@ jobs:
54
52
env:
55
53
DIGEST: ${{ steps.build-and-push.outputs.digest }}
56
run: |
+ cosign version
57
echo "ghcr.io/${{ github.repository }}:static" | xargs -I {} cosign sign --yes {}@${DIGEST}
0 commit comments